Skip to content

BUILD-10864: Migrate docker-a3s workflows to sonar-m-docker#6730

Draft
hedinasr wants to merge 2 commits intomasterfrom
chore/hnasr/BUILD-10864-migrateDockerA3sToSonarMDocker
Draft

BUILD-10864: Migrate docker-a3s workflows to sonar-m-docker#6730
hedinasr wants to merge 2 commits intomasterfrom
chore/hnasr/BUILD-10864-migrateDockerA3sToSonarMDocker

Conversation

@hedinasr
Copy link
Copy Markdown
Contributor

@hedinasr hedinasr commented Apr 1, 2026

BUILD-10864: Migrate docker-a3s workflows to sonar-m-docker

Both docker-a3s.yml (AWS) and docker-a3s-repox.yml (Repox) workflows build and push Docker images, making them candidates for the sonar-m-docker self-hosted rootless DinD runner.

Changes

  • Replace github-ubuntu-latest-m with sonar-m-docker in the build_and_publish job of both workflows
  • Add SonarSource/ci-github-actions/config-npm@v1 after jdx/mise-action to route npm traffic through the internal Repox registry (self-hosted runners block direct npmjs access)
  • Remove the manual "Configure npm registry" step and the ARTIFACTORY_ACCESS_TOKEN vault secret — both are now handled by config-npm@v1

The get_build_number job in each workflow does not use Docker and remains on github-ubuntu-latest-s.

@hashicorp-vault-sonar-prod
Copy link
Copy Markdown

hashicorp-vault-sonar-prod bot commented Apr 1, 2026

BUILD-10864

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Apr 1, 2026

Ruling Report

No changes to ruling expected issues in this PR

- Replace github-ubuntu-latest-m runner with sonar-m-docker
- Add config-npm@v1 action for Repox npm registry (self-hosted runners
  block direct npmjs access)
- Remove manual "Configure npm registry" step and ARTIFACTORY_ACCESS_TOKEN
  vault secret (now handled by config-npm@v1)
@hedinasr hedinasr force-pushed the chore/hnasr/BUILD-10864-migrateDockerA3sToSonarMDocker branch from d234a88 to 546fd7d Compare April 1, 2026 10:25
@sonarqube-next
Copy link
Copy Markdown

sonarqube-next bot commented Apr 1, 2026

Quality Gate passed Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

@hedinasr hedinasr force-pushed the chore/hnasr/BUILD-10864-migrateDockerA3sToSonarMDocker branch from c32a8f2 to a363064 Compare April 1, 2026 12:01
Migrate all remaining GitHub Actions workflows from github-ubuntu-latest-s/m
to sonar-m-docker self-hosted runner.

Affected workflows:
- build.yml: migrate all Linux jobs; replace manual vault+npm-config steps
  in populate_npm_cache_steps anchor with SonarSource/ci-github-actions/config-npm@v1
- LabelEslintPlugin.yml, PullRequestClosed.yml, PullRequestCreated.yml
- RequestReview.yml, SubmitReview.yml
- bump-versions.yml, dogfood.yml, release_eslint_plugin.yml
- update-eslint-plugin-changelog.yml

Note: populate_npm_cache_win job stays on github-windows-latest-s (Windows).
Note: runner-environment input in automated-release.yml is a workflow call
parameter, not a runs-on — intentionally left unchanged.
@hedinasr hedinasr force-pushed the chore/hnasr/BUILD-10864-migrateDockerA3sToSonarMDocker branch from a363064 to e32820f Compare April 1, 2026 12:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant